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Detailed Action 

This office action is in response to the correspondence received on February 23, 201 1 . 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 

forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 24-43 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Baker et al (US Patent No: 5,696,898) in view of Majkut et al (US Patent No: 7,243,138) 
and in further view of Araujo et al (US Patent No: 6,920,502), hereafter referred to as 
Baker and Majkut and Araujo, respectively. 

1 . With regards to claims 24 and 34, Baker teaches through Majkut and Araujo, 
a method of enrolling networked resources via an enrollment system 
communicating with an enrollment administration system permitting 
enrollment based on enrollment rules stored in an enrollment database, the 
method comprising: receiving, by an enrollment administration system 
executing on a computing machine, a request from an enrollment system 
communicating with the enrollment administration system, to enroll a 
networked resource for a user, the request comprising at least an 
identification of the user and an identification of the networked resource, 
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(Baker teaches a proxy server (enrollment administration system executing 
on a computing machine) receiving a user request in the form of a URL; see 
column 3, lines 38-40, Baker. The proxy server determines the user identity 
and requested resource from the URL; see column 3, lines 45-56, Baker) the 
networked resource comprising one of: a desl<top and an application program 
(see Araujo below); identifying, by the enrollment administration system, one 
of a plurality of enrollment rules stored in an enrollment database, each rule, 
identifying a group of users permitted to enroll a networked resource, the 
identified rule identifying a group of users comprising at least the user (Baker 
teaches the proxy server then referencing a relational database (enrollment 
database) to determine allowable resources for the user; see column 3, line 
56 - column 4, line 6, Baker. See Majkut below for user groups); enrolling, by 
the enrollment administration system, the networked resource for the user 
responsive to (i) authenticating the identity of the user and (ii) determining, 
based on the identified rule, that the user has permission to enroll and use the 
networked resource, the enrollment allowing a user to later access the 
networked resource from a remote client as if the enrolled networked 
resource locally resides on the client (see column 4, lines 1 1-15, Baker); 
providing, responsive to the enrollment, a remote access system to the user 
to later access the networked resource from the remote client (see Araujo 
below); adding, by the enrollment administration system responsive to the 
enrollment, an enrollment record of the networked resource for the user to an 
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enrollment database (see Araujo below); requesting, by the user via the 
remote access system, remote access to the networked resource; verifying, 
by the remote access system, the identity of the user responsive to the 
request; determining, by the remote access system in communication with the 
enrollment database, that the user was previously enrolled in the requested 
network resource (see Araujo below); and granting the user access to the 
networked resource responsive to the verification and determination (Baker 
teaches permitting the user URL request to be forwarded to the resource 
upon being deemed allowable; see column 4, lines 11-16, Baker) 

While Baker teaches the access control of resources, Baker does not 
explicitly cite the use of an enrollment system that fon/vards the user request 
to the enrollment administration system (Baker's proxy server). In the same 
field of endeavor, Majkut also teaches a resource access control system. 
Within Majkut's disclosure it is taught how a user request is first received by a 
web server (enrollment system); see column 5, lines 25-29, Majkut. The web 
server then fonfl/ards the request to the database server (enrollment 
administration server); see column 5, lines 36-37, Majkut. Furthermore, 
Majkut also teaches rules applicable to groups of users; see column 20, lines 
17-26, Majkut. 

While Baker and Majkut both teach resource access control systems, 
neither explicitly cite the use of enrollment records, which are used to allow 
users to later access the resource. Also neither Baker nor Majuk explicitly 
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cite having the remote client access the resource as if the resource resides 
locally. In the same field of endeavor, Araujo also teaches a resource access 
control system. Within Araujo's disclosure it is taught how users are given 
profiles (enrollment record) which are used during resource access verifying 
and access establishment; see column 9, lines 7-56, Araujo. The profiles are 
used when reconnecting to a previous session; see at least column 46, line 
65 - column 47, line 5, Araujo. Araujo also teaches how the accessed 
resource, which is a remote computer, seems as if it were directly there (as if 
it resides locally); see column 7, lines 58-62, Araujo. 

Majkut teaches how the web server provides the user with a website 
interface by which to make the resource request; see column 5, lines 25-29, 
Majkut. In addition, Araujo teaches how a network enables a remote access 
session to seem like a direct (local) resource. Therefore it would have been 
obvious to one skilled in the art, during the time of the invention, to have 
combined the teachings of Baker with those of Majkut and Araujo, to provide 
a web-based resource request system. 

2. With regards to claims 25 and 35, Baker teaches through IVIajkut and Araujo, 
the method wherein remote access to the networked resource uses a remote 
display protocol (Baker teaches the requesting of information from network 
resources, implying the network resources are network devices/computers; 
see column 3, lines 51-53, Baker. See also at least column 4, lines 53-56, 
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Majkut. Also see column 7, line 63 - column 8, line 1 1, Araujo for AlP (a type 
of remote display protocol)). 



3. With regards to claims 26 and 36, Baker teaclies tlirougli IVIajkut and Araujo, 
tine metliod wlierein identifying an enrollment rule further comprises: defining 
a plurality of groups of users; defining a plurality of groups of networked 
resources; and specifying a group of networked resources that a group of 
users is permitted to enroll (see at least column 3, line 8, column 4, line 65 
and column 5, line 1 1, Baker). 



4. With regards to claims 27 and 37, Baker teaches through Majkut and Araujo, 
the method wherein enrolling the networked resource is disallowed from a 
remote console (see column 4, lines 17-20, Baker). 



5. With regards to claims 28 and 38, Baker teaches through Majkut and Araujo, 
the method wherein enrolling the networked resource requires the user to 
enroll from a console physically attached to the networked resource (see 
column 3, lines 33-34, Baker). 



6. 



With regards to claims 29 ad 39, Baker teaches through Majkut and Araujo, 
the method wherein granting access to the networked resource further 
comprises granting access to a desktop of a networked computing device 
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(see column 4, lines 11-15, Baker and see column 7, lines 58-62 of Araujo for 
support that a resource can be a remote computer). 

7. With regards to claims 30 and 40, Baker teaclies tlirougli IVIajkut and Araujo, 
tine metliod wlierein tine enrollment administration system is a network 
application (see column 1, lines 54-56, Majkut). 

8. With regards to claims 31 and 41 , Baker teaches through Majkut and Araujo, 
the method further comprising determining, by a locator system, a location of 
the user (see at least column 6, lines 15-23, Majkut). 

9. With regards to claims 32 and 42, Baker teaches through Majkut and Araujo, 
the method further comprising enrolling the networked resource based on the 
location of the user (see at least column 6, lines 15-23, Majkut). 

10. With regards to claims 33 and 43, Baker teaches through Majkut and Araujo, 
the method further comprising denying access to the networked resources 
upon determining the user had not previously successfully enrolled the 
networked resource via the enrollment administration system (see column 4, 
lines 30-34, Baker). 
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1 1 .The obviousness motivation applied to independent claims 24 and 34 are 
applicable to their respective dependent claims. 

Response to Arguments 

Applicant's arguments with respect to claims 24-32 have been considered but are 
moot in view of the new ground(s) of rejection. The claims have been amended to 
highlight how a resource is a computer. The claims have also been amended to 
highlight the use of enrollment records, which are used to allow users to later access 
the resource. Finally the claims have been amended to highlight providing an 
environment wherein the accessed resource seemed as if the resource resides locally. 
A new search was conducted and the Araujo prior art was found. Araujo also teaches a 
resource access control system. Within Araujo's disclosure it is taught how users are 
given profiles (enrollment record) which are used during resource accessing; see 
column 9, lines 7-56, Araujo. The profiles are used when reconnecting to a previous 
session; see at least column 46, line 65 - column 47, line 5, Araujo. Araujo also 
teaches how the accessed resource, which is a remote computer, seems as if it were 
directly there (as if it resides locally); see column 7, lines 58-62, Araujo. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
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§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to AZIZUL CHOUDHURY whose telephone number is 
(571)272-3909. The examiner can normally be reached on M-F. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Krista Zele can be reached on (571) 272-7288. The fax phone number for 
the organization where this application or proceeding is assigned is 571 -273-8300. 
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Information regarding tine status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/A. 0.1 

Examiner, Art Unit 2453 



/Krista M. Zele/ 

Supervisory Patent Examiner, Art Unit 2453 



